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January 7, 2019 


VIA EMAIL ONLY 

John Neumon 
Assistant Attorney General 
Office of the Attorney General 
Privacy & Data Security Department 
110 Sherman Street 
Hartford, CT 06105-2267 

Re: Report of Data Breach 
Dear Attorney Neumon: 

This letter is sent in compliance with Connecticut General Statutes § 36a-701b, 
to report a data breach to the Connecticut Attorney General and will also serve as 
Notice to the affected resident, Janet Kalpin. Thank you for your assistance in 
addressing this matter. 

This breach occurred by the electronic filing of a trial exhibit on November 7, 
2018, in the matter of Janet Kalpin v. Norwich Commercial Group, d/b/a Norcom 
Mortgage & Insurance, Docket No. HHD-CV17-6078296-S. The exhibits were filed on 
the Superior Court website for this matter and also served on Ms. Kalpin’s attorney. I 
had redacted Ms. Kalpin’s social security number from other portions of the filing, but 
failed to redact it on her employment application that was part of that filing. 

Ms. Kalpin brought this to my attention by email on Sunday, December 2, 2018. 
Ms. Kalpin filed a Motion to Seal the exhibits on Monday December 3, 2018. I called 
Caseflow to inquire what could be done to expedite the sealing of that filing. I filed a 
Reply to Motion to Seal on December 4, stating, “Defendant consents to Plaintiffs 
Motion to Seal and joins the Plaintiff in urging the Court to Seal the Defendant’s 
Exhibits, Docket Entry 137, or at a minimum Exhibit A of that filing.” The Honorable 
David Sheridan, Presiding Judge, granted the Motion to Seal that morning. 

Aside from service on Ms. Kalpin’s trial attorney and to the court, the documents 
were not provided to anyone else or to my knowledge accessed by anyone else. 
However, they were on the court website which was not accessible by the public after 
the jury selection began on November 2, 2018, but was again public after the jury 
returned a verdict for defendant on November 15, 2018. The document in question was 
available to the public for the period November 16, 2018 through the morning of 
December 4, 2018, a period of approximately 19 days. 
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Since this error the firm has reinforced the policy that at least two individuals will 
review all electronic filings or communications involving conveyance of “personal 
information” as defined in Connecticut General Statutes § 36a-701b to be certain that 
any such information is redacted. 

I will offer to pay for two years of LifeLock Advantage coverage for Ms. Kalpin at 
the approximate cost of $200 per year. In addition to the LifeLock Standard protection 
the Advantage plan includes up to $100,000 in stolen funds reimbursement, up to 
$100,000 in personal expense compensation, up to $1 Million coverage for lawyers and 
experts, Bank & Credit Card Activity Alerts, Alerts on crimes committed in her name, 
Data Breach Notifications, Fictitious Identity Monitoring, Annual Credit Report & Score. 
It is my understanding that this coverage provides the necessary identity theft 
prevention services and identity theft mitigation services as required by statute. 

Please contact me if further information is needed and to arrange for payment of 
the LifeLock 


/ 



cc: Office of the Attorney General - Data Breach Reporting, ag.breach@ct.gov 

Assistant Attorney General John Neumon, john.neumon@ct.gov 
Janet Kalpin, mytrialemail22@gmail.com 



